2. Role definition
The Super Administrator must configure each user role required for an instance of Global Trace, as well as assign permissions for features that each role can access.
Global Trace’s five role types include: Administrator role; API user; Producer role; Assessor role; and Brand role. Each new role consists of a role name, role type, and list of permissions. A subset of permissions can be selected for each of the role types. Permissions can be selected based on the priorities of the System Administration and the context that the system is intended to be used in. For example, in some contexts QR codes may be preferred as physical markers on products. In other cases, additive tracers such as DNA markers may be preferred. The Super Administrator can configure which functions will be available when logging product transformations to suit their context.
Administrator Role Configuration
An Administrator role is assigned by the Super Administrator to platform users who help oversee Global Trace but do not have authorization to change the technical configuration of the platform.
Listed below is a table of all permissions that can be assigned for Administrator roles.
| Category / Permission | Action |
|---|---|
| Onboarding | Complete Administrator role profile information when first creating an account. |
| DNA | Log synthetic DNA and isotopic test results and view synthetic DNA and isotopic test results for products in a supply chain. |
| Generate QR codes | Administer QR codes by creating groups of codes, downloading them, and sending them to suppliers. QR ccodes are among the data carriers supported in Global Trace. |
| Submit incident reports | Create or view incident reports & assign to information partners (Assessor roles). |
| User Management | Invite and manage users on Global Trace, view supplier risk assessment uploaded by Producer role user. |
| Trace product | Trace a product across a supply chain by matching product identifiers supplied by the user (including invoice nNumber, packing list number, date of purchase) with those input into Global Trace by Producer role users. |
API User Role Configuration
An API User Role defines a set of features that API users can be invited to have access to on Global Trace.
Listed below is a table of all permissions that can be assigned for API User Roles.
| Category / Permission | Action |
|---|---|
| Submit incident report via API | Can be done proactively or reactively. |
| Get incident reports via API | Retrieves a list of all Incident Reports logged by Assessors and Administrator Roles. |
| Create new risk index | Create new external risk index for supplier risk assessment. |
| Edit existing risk indices | Allows user to edit an external risk index. |
| Create new indicator in list of indicators | Add new indicator/sub -indicator pair to List of Indicators. |
| Edit existing indicator in list of indicators | Update existing indicator/sub -indicator pair that don’t have any associated Incident Reports. |
Producer Role Configuration
A Producer role is assigned to platform users that purchase, transform, and sell products. Producers should be defined using standardized identifiers. Super Administrators can specify whether Producers will use an internally defined facility identifier, or externally defined identifier such as Open Supply Hub Identifier (OS ID), Responsible Minerals Initiative’s RMAP ID, or Data Universal Numbering System (DUNS) ID. Refer here for complete details of connecting to Global Trace to an external identifier account.
When defining a Producer role, the Super Administrator must specify if the facility extracts raw material (Yes/No) and the Chain of Custody Mmodel (Product segregation/Mass Balance) that will be supported during the use of Global Trace.
Listed below is a table of all permissions and settings that can be configured for a Producer role.
| Category / Permission | Action |
|---|---|
| Onboarding (profile) | Complete a profile when first creating an account. Profile can be configured by the Producer themselves or by an Administrator on behalf of a Producer. |
| Onboarding SAQ | Complete an Onboarding SAQ. The Onboarding SAQ can be uploaded by the Administrator or the Producer. |
| Invite partners | Add other business partners for recording transaction/shipping activities |
| Log purchase | Record purchase information. The Super Administrator must specify the data carriers supported (Product ID, QR code, DNA marker ID); support provided for imported products; and if the user can record purchases from intermediaries (brokers). |
| Log transformations | Recording transformation activity and assign product identifier for output product |
| Log sale | Record sale transaction to another business partner |
| Log by-product | Record quantity of by-product generated during transformation process |
| Log transport | Record the transport of products from one user to another. |
| View History | OView all product and by-product activities (transactions, transformations, shipping) along with margin of error (when mass balance chain of custody is used). |
| Trace product | Trace a product across a supply chain by matching product identifiers supplied by the user (including invoice number, packing list number, date of purchase) with those input into Global Trace by Producers |
Assessor Role Configuration
An Assessor role is assigned to platform users who will assess conditions in facilities and report on them. Assessment can be undertaken reactively (after receiving a request for investigation), or proactively (by creating an Incident Report).
| Category / Permission | Action |
|---|---|
| Onboarding (profile) | Complete a profile when first creating an account. Profile can be configured by the Assessor themselves or by an Administrator on behalf of an Assessor. |
| Onboarding SAQ | Assign an SAQ to be completed during account creation. The SAQ can be submitted by the Assessor themselves or by the Administrator. |
| Submit incident reports (proactive assessments) | Proactively submit incident reports on labor issues at any facility via “Create incident report” function. |
| Submit incident reports (reactive assessments) | Respond to incident reports assigned to the Assessor. |
| View incident reports | Configure this role to view all incident rRreports (assigned to any Assessor) or only reports assigned to this specific Assessor. |
Brand Role Configuration
A Brand role is assigned to downstream representatives using the platform to manage their suppliers and map or trace products throughout their supply chain.
| Category / Permission | Action |
|---|---|
| Onboarding (profile) | Complete a profile when first creating an account. Profile can be configured by the Brand user themselves or by an Administrator on behalf of a Brand user. |
| Onboarding (SAQ) | Assign an onboarding SAQ to be completed during account creation. The onboarding SAQ can be configured by the Brand user themselves or by the Administrator. |
| Trace product | Trace a product across a supply chain by matching product identifiers supplied by the user (including invoice number, ppacking list number, date of purchase) with those input into Global Trace by Producers. |
| Supplier Management | Manage suppliers and view comprehensive risk assessments. |
| Improvement plans | View and assign Improvement plans to producers. |